Week 6 demo (#2513)

* PR for scientific paper

* added title

* week 6 demo pull request

* Removed scientific paper

contributions/demo/week6/tocarls-shahoud/README.md

@@ -0,0 +1,26 @@
+# Assignment Proposal
+
+## Title
+
+Using dependabot to automatically detect vulnerabilities in imported packages
+
+## Names and KTH ID
+
+- Tobias Carlsson ([email protected])
+- Siham Shahoud ([email protected])
+
+## Deadline
+
+- Week 6
+
+## Category
+
+- Demo
+
+## Description
+
+We want to demo dependabot, it is a tool that scans imported libraries for vulnerabilities, we want to demo how dependabot will automatically create pull requests when an imported library shows a vulnerability. This is very beneficial with keeping your applications more secure from vulnerable code that is not directly under your control.
+
+**Relevance**
+
+This let's organisations automatically check their applications for security vulnerabilities and therefore is a valuable tool for DevSecOps.